1 00:00:00,910 --> 00:00:06,310 So in my network, I'll have my Syslog server connected to router 1 which in turn is connected 2 00:00:06,310 --> 00:00:13,420 to router 2. My Syslog server has an IP address of 192.168.1.254 3 00:00:16,730 --> 00:00:19,550 and it can ping the loopbacks of both routers. 4 00:00:21,520 --> 00:00:25,930 Kiwi Syslog is running on the Windows PC 5 00:00:27,350 --> 00:00:28,080 over here. 6 00:00:28,760 --> 00:00:34,490 So now let's configure logging messages on the router, so I'm gonna say logging 7 00:00:36,910 --> 00:00:46,150 and I need to specify an IP address if I want to log to that server, so 192.168. 8 00:00:46,150 --> 00:00:47,590 1.108 9 00:00:48,810 --> 00:00:50,010 that is once again 10 00:00:51,840 --> 00:00:54,330 the IP address of this PC 11 00:00:57,240 --> 00:00:59,580 and then I'm going to say logging trap 12 00:01:00,410 --> 00:01:00,950 7. 13 00:01:02,170 --> 00:01:05,170 Now, before I enable logging on router 2 14 00:01:07,130 --> 00:01:10,850 let's have a look at logging. So show log 15 00:01:13,570 --> 00:01:21,610 we can see that trap logging is set to debugging and I'm logging to this server, according to the router 2 16 00:01:21,610 --> 00:01:30,190 messages have already been logged to the syslog server and I can actually see that here in my Kiwi 17 00:01:30,190 --> 00:01:30,800 syslog server. 18 00:01:31,210 --> 00:01:35,970 So something was configured via the console and logging has been enabled. 19 00:01:36,370 --> 00:01:45,190 So it's nice now is I could actually do something simple, like just pressing control Z or control Zed and 20 00:01:45,190 --> 00:01:48,340 notice I can see the output on the syslog server. 21 00:01:49,340 --> 00:01:56,150 Now, I'm not seeing anything on my console because my console at the moment is set to level errors, 22 00:01:56,360 --> 00:01:57,560 so let's change that. 23 00:01:58,030 --> 00:02:01,310 So logging console 7 or debugging, 24 00:02:03,090 --> 00:02:04,520 I'll see the output here 25 00:02:04,790 --> 00:02:07,460 and I also see it on my syslog server. 26 00:02:08,270 --> 00:02:13,540 Now, one of the things that you'll notice is that the date and time stamps are not correct. 27 00:02:14,090 --> 00:02:20,450 If I type show clock, you can see that the clock is set to March 2002. 28 00:02:21,340 --> 00:02:23,110 So let's set the clock 29 00:02:24,620 --> 00:02:28,490 to the current time at the moment here in the UK 30 00:02:30,050 --> 00:02:42,140 and the 16th of May 2016 at the moment, so show clock notice, please, that on my Syslog server, 31 00:02:42,170 --> 00:02:44,420 it changed from March to May. 32 00:02:45,420 --> 00:02:52,200 So that update is being done, you can also see in this case that there are some OSPF messages because 33 00:02:52,200 --> 00:02:54,240 I am running 34 00:02:55,820 --> 00:03:02,270 a debug adjacencies on the router, so my timestamps have been enabled properly. 35 00:03:03,540 --> 00:03:06,510 If I type show run pipes include log, 36 00:03:08,850 --> 00:03:17,010 notice service, time stamps, log date time milliseconds allows me to specify that timestamps will 37 00:03:17,010 --> 00:03:18,820 be included in logging messages. 38 00:03:19,410 --> 00:03:25,530 That's a very important command to add to your router so that you actually get the date and timestamps 39 00:03:25,530 --> 00:03:26,640 on your log messages 40 00:03:27,070 --> 00:03:29,600 otherwise you would know when things took place. 41 00:03:30,270 --> 00:03:37,140 So before I explain some of the options, let's do a test or shut the interface down on router 2 42 00:03:39,160 --> 00:03:45,730 and then, no, shut it and what you should see now is I get logging messages on my console 43 00:03:47,040 --> 00:03:53,640 but I'm also getting those logging messages on my Syslog server. So I'm seeing all the logging 44 00:03:53,640 --> 00:03:58,600 messages not only on the console, but I'm seeing it on my Syslog server. 45 00:03:59,460 --> 00:04:04,260 So this is a better way of storing log messages. 46 00:04:04,740 --> 00:04:10,610 There are other options available and you can have a look at the online help for more details. 47 00:04:11,010 --> 00:04:18,779 I simply wanted to show you here how to get a Syslog system running and integrated between a Cisco router 48 00:04:19,050 --> 00:04:22,560 running in GNS3 and the Solarwind Syslog server.